Securing the open source supply chain across GitHub | Dark Hacker News